---
title: "Add static certificates"
canonical: "https://docs.aryaka.com/space/KNOW/1543669/Add%20static%20certificates"
format: markdown
---
You can upload a static certificate to your Vault from the Static Certificates page. For a complete configuration, upload the following: Encrypted server certificate (includes the private key and certificate) in P12/PFX file format Root CA certificate in PEM file format Intermediate Root CA certificates (if present) in PEM file format If it is not already open, complete the following procedure to display the Static Certificates page: To open the Static Certificates page While Aryaka accepts server certificate information without the trust information, it is  not  recommended. The option to upload a static certificate is available to you only if you have Write privileges to MyAryaka. Upload server certificate MyAryaka only accepts password-encrypted p12 files that contain the server certificate and the server's private key. See  Converting certificate file formats  to learn how to create a p12 file. To upload the server certificate Open the Static Certificates page if it is not already open: Log in to MyAryaka. The Home page appears. Click  Global Settings  in the left navigation pane. The Global Settings page appears and displays a series of tiles. Click  Static Certificates  in the Vault tile. The Static Certificates page appears. Click the  Add  icon in the banner. The Add New Static Certificates page appears. Select  Server  in the File Type drop-down list. Select the certificate file by clicking  Browse  and navigating your file system to the desired .p12 file. Enter the p12 password into the Key field. Click  Upload . If an Incomplete Trust Chain message appears, enable the Force checkbox and click  Upload  again. The certificate is uploaded and the Certificates page appears. The uploaded certificate is added to the table with one of the following statuses: Valid/trusted—Appears if the certificate is a self-signed or if signed by a well known Public Root CA. Incomplete trust chain—You must upload the CA certificate as described in the next section. (Optional) Click any row in the Server Certificate table to display details about the selected certificate. After the certificates are uploaded, Aryaka support completes the configuration process and contacts you when it is done. If any additional certificates need to be uploaded, repeat the process as appropriate. Upload CA certificate Every server certificate upload should be accompanied by the certificate authority (CA) certificate upload. This allows Aryaka to serve the trust information to the customer clients connecting to it. To upload a CA certificate Open the Static Certificates page if it is not already open: Log in to MyAryaka. The Home page appears. Click  Global Settings  in the left navigation pane. The Global Settings page appears and displays a series of tiles. Click  Static Certificates  in the Vault tile. The Static Certificates page appears. Click the  Add  icon in the banner. The Add New Static Certificates page appears. Select  CA  in the File Type field. Select a CA certificate file by clicking  Browse  and navigating your file system to the desired .crt or .pem file. The certificate selected can be a Root CA, an Intermediate CA, or a chain that contains both. Click  Upload . The selected CA is uploaded, the Certificate Trust Chain tab of the Static Certificates page appears, and the uploaded CA is added to the table with one of the following statuses: Valid/trusted—Appears if the certificate is signed by a well known Public Root CA. Valid/self-sign—Appears if the certificate is a self-signed. (Optional) Click any row in the Certificate Trust Chain table to display details about the selected certificate. After the certificates are uploaded, Aryaka support completes the configuration process and contacts you when it is done. If any additional certificates need to be uploaded, repeat the process as appropriate. Use a certificate for SSL optimization A certificate that is uploaded to Aryaka does not activate SSL optimization unless it is explicitly mapped to the designated server or service. This must be done by contacting Aryaka Support and providing them with the required information by email or phone. After the certificate is uploaded, Aryaka Support contacts you to obtain the the following information: Which service is the SSL certificate for? If the certificate is for SmartServices or the IP App Delivery Service, provide the following information: Server IP and port. SNI related information, if any. Explicit TLS versions and ciphers (if any) that could be specified to negotiate in the SSL handshake. In this topic Related topics Manage static certificates Converting certificate file formats